#Website security
Website security covers the everyday measures that keep a site, its visitors and its data safe. Articles tagged here focus on practical protection for small and medium websites rather than enterprise theory. They cover certificates, updates, exposed files, login protection, backups and monitoring. Each guide explains the real risk first and then the fix, in order of impact. The advice fits business owners, marketers, agencies and developers alike. Start here if you want a clear picture of what matters most for your site.
16 sept. 2026 · 8 min de cititSubresource Integrity: Protect Your Site From Tampered Scripts
Subresource Integrity lets browsers reject third-party scripts and styles that have been changed. Learn how SRI works, when to use it and where it…
14 sept. 2026 · 8 min de cititDNSSEC Explained for Website Owners: Is It Worth Enabling?
DNSSEC signs your DNS records so resolvers can detect forged answers. Learn how it works, what it protects, the risks of misconfiguration and how…
12 sept. 2026 · 8 min de cititWebsite Backup Strategy: How to Back Up So You Can Restore
Backups only matter if you can restore them. Learn what to back up, how often, where to store copies and how to test restores…
11 sept. 2026 · 7 min de cititWeb Application Firewall (WAF): Does Your Website Need One?
A web application firewall filters malicious requests before they reach your site. Learn what a WAF blocks, what it cannot do, and which type…
10 sept. 2026 · 8 min de cititWebsite Security Scan vs Penetration Test: What You Need
Automated security scans, audits and penetration tests answer different questions at very different costs. Learn what each covers and when you need which.
9 sept. 2026 · 7 min de cititBrute-Force Login Attacks: How to Protect Your Website Logins
Bots try thousands of passwords on website logins every day. Learn how brute-force and credential stuffing work and which protections actually stop them.
8 sept. 2026 · 8 min de cititPermissions-Policy Header: Control Camera, Location and More
Permissions-Policy lets you switch off browser features like camera, microphone and geolocation for your pages and embedded iframes. Here is how to set it.
7 sept. 2026 · 8 min de cititReferrer-Policy Header: Which Value to Use and Why It Matters
Referrer-Policy controls how much of your page URLs other sites see. Learn what each value does, the safe default, and how it affects analytics…
1 sept. 2026 · 8 min de cititCAA Records Explained: Control Who Can Issue Your Certificates
A CAA DNS record lists which certificate authorities may issue certificates for your domain. Learn how it works, how to set it up and…
31 aug. 2026 · 8 min de cititsecurity.txt: How to Add a Security Contact to Your Website
A security.txt file tells researchers how to report vulnerabilities on your site. Learn the required fields, where to place it and how to handle…
30 aug. 2026 · 8 min de cititDirectory Listing Enabled? How to Disable It on Any Server
Open directory listings let anyone browse your folders, backups and uploads. Learn how to find them and disable them on Apache, Nginx, IIS and…
29 aug. 2026 · 8 min de cititExposed .env, .git and Backup Files: How to Find and Block Them
Publicly reachable .env files, .git folders and old backups can leak passwords and source code. Learn how to find them on your site and…